Michael Altfield comments

Results 529 comments of


                                            Michael Altfield

Secure Install Process (Cryptographic Authenticity)

btw, docker has a concept of release signing called "Docker Content Trust", but it's pretty horribly broken, has been for a long time, and--imho--probably should be avoided as a secure...

Implement Hashcash for New Accounts (Anti-Spam Rate-Limiting)

> PS: Use a PoW algo that is resistant to GPU and ASIC mining. The algorithm used by Monero comes to mind. It looks like crypto-loot is a service specifically...

Implement Hashcash for New Accounts (Anti-Spam Rate-Limiting)

@Raspire52 would you be interested in integrating mCaptcha into Lemmy for new account signups? Do you have rust & TypeScript experience?

Implement Hashcash for New Accounts (Anti-Spam Rate-Limiting)

@Raspire52 please give it a try. And please post an update with your progress by Friday. I think time is the thing that most of us *don't* have :)

Implement Hashcash for New Accounts (Anti-Spam Rate-Limiting)

> Does mCaptcha actually have a solution for this? Yes of course. The delay is adjustable. Your quote literally says "PoW difficulty is variable". Please read the [OP of this...

Implement Hashcash for New Accounts (Anti-Spam Rate-Limiting)

@Raspire52 were you able to start implementing mCaptcha in Lemmy? I ask because I don't see any repos on your account yet, and it would be good if we could...

Implement Hashcash for New Accounts (Anti-Spam Rate-Limiting)

@Raspire52 I don't understand what you're saying about DoS attacks over Tor. DDoS attacks can happen over the Tor network or the clearnet. Using mCaptcha doesn't make this easier or...

Implement Hashcash for New Accounts (Anti-Spam Rate-Limiting)

> a risk to using mCaptcha would be that a DoS attack can be mounted via Tor Sorry, that's *not* a risk of using mCaptcha. That's a risk of running...

Implement Hashcash for New Accounts (Anti-Spam Rate-Limiting)

> We already have rate limits in place, so I dont see much benefit adding two more containers to add a different type of rate limit. Lemmy's current rate-limiting is...

Implement Hashcash for New Accounts (Anti-Spam Rate-Limiting)

A bit off-topic, and I'm not an instance admin but from what I gather a lot of the smaller [instances run on](https://fedidb.org/software/lemmy) VMs or Digital Ocean droplets (or Hetzner, OVH,...